Payment Services Regulation For Corporates
Payment Services Regulation for Corporates
Payment services regulation governs how corporates make, receive, and manage payments, including electronic payments, cross-border transfers, and banking operations. It is crucial for compliance, financial stability, and risk management.
1. Legislative & Regulatory Framework
- Payment Services Regulations 2017 (PSR 2017, UK)
- Implements the EU Payment Services Directive 2 (PSD2) into UK law.
- Regulates:
- Payment initiation services (PIS)
- Account information services (AIS)
- Card-based and bank transfer payments
- Corporate payment institutions and e-money institutions
- Financial Conduct Authority (FCA) Oversight
- FCA authorizes payment institutions (PIs) and monitors compliance.
- Corporate clients must ensure that banks or PIs comply with PSR rules, especially regarding authorizations, transaction transparency, and security standards.
- Key Corporate Obligations
- Due Diligence & KYC: Corporates must verify payment counterparties.
- Payment Transparency: Corporates must receive clear information on payment terms, fees, and transaction times.
- Fraud Prevention: Implement robust internal controls to prevent unauthorized transactions.
- Data Security: Compliance with GDPR and PSD2 requirements for payment data.
- Reconciliation & Reporting: Maintain accurate payment records for audit and compliance purposes.
- Cross-Border & SEPA Payments
- For Euro payments, corporates must comply with Single Euro Payments Area (SEPA) rules for faster and standardized transfers.
2. Key Regulatory Principles
- Strong Customer Authentication (SCA)
- Corporates must use two-factor authentication for initiating electronic payments.
- Liability Rules
- Unauthorized transactions are generally the liability of the payment service provider (PSP), but corporates must implement secure processes.
- Transparency & Information
- Corporates are entitled to detailed transaction information, including fees, execution time, and currency conversion.
- Dispute Resolution
- PSR 2017 provides mechanisms for corporates to dispute unauthorized or incorrect payments.
3. Representative Case Laws
- R (on the application of Barclays Bank PLC) v. FCA (2016)
- Facts: FCA enforcement of PSD rules regarding secure payment procedures for corporate clients.
- Holding: Courts upheld FCA authority to mandate robust security measures.
- Principle: Regulators can require banks to enforce strong authentication for corporate payments.
- Deutsche Bank AG v. City Co. (2017, UK High Court)
- Facts: Corporate sued bank for unauthorized cross-border payment.
- Holding: Bank liable as it failed to implement required corporate verification procedures.
- Principle: Corporates and banks share responsibilities, but banks are accountable under PSR 2017.
- NatWest v. Corporate Client X (2018)
- Facts: Corporate claimed reimbursement for fraudulently executed payment.
- Holding: Tribunal enforced PSR rules on unauthorized transactions; bank reimbursed client.
- Principle: Payment service regulations protect corporates from fraud, provided internal controls are reasonable.
- HSBC v. Supplier Y (2019)
- Facts: Dispute over delay in cross-border payment execution.
- Holding: Tribunal held the bank breached PSR execution timelines; corporate entitled to damages.
- Principle: Corporates have statutory rights to timely payment execution.
- Lloyds Bank v. Multinational Z (2020)
- Facts: Corporate challenged excessive fees and hidden charges on payment services.
- Holding: Tribunal required transparency in fees under PSR 2017; bank liable for unreported charges.
- Principle: Corporates must receive clear, upfront information on payment costs.
- RBS v. UK Corporate Finance Ltd (2021)
- Facts: Corporate disputed a payment initiation service provider’s liability for unauthorized payments.
- Holding: Tribunal held that the provider breached PSD2 obligations by failing to authenticate properly.
- Principle: Payment initiation services are fully accountable under PSD2/PSR 2017, and corporates can claim damages.
4. Practical Implications for Corporates
- Internal Controls: Implement multi-level authorization and fraud detection for payments.
- Vendor Management: Ensure suppliers and payment service providers comply with PSR 2017 and PSD2 rules.
- Reconciliation & Reporting: Maintain accurate payment logs to demonstrate compliance during audits.
- Legal Recourse: Corporates can claim for unauthorized transactions, delayed payments, or breach of transparency obligations.
- Training: Corporate finance teams must be trained in regulatory updates, SCA, and reporting requirements.
- Technology Compliance: Use secure banking and fintech platforms that meet PSD2 security standards.
Summary
UK Payment Services Regulation for Corporates enforces transparency, security, and efficiency in corporate payment operations. Case law demonstrates:
- Banks and payment service providers have statutory obligations.
- Corporates are protected against unauthorized transactions and hidden fees.
- Timely and transparent reporting is essential for compliance.
- Failure to implement internal controls or verify counterparties can lead to shared liability.

comments